Oh yeah, auth itself isn't that difficult. But... auth resilient against malicious actors?